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WHAT IS CLAIMED IS : 

1 . A method for securing a communication over a network medium between at 
least two devices, comprising: 

transmitting pre-authentication information from a first device to a second 
device over a location-limited channel; and 

using the pre-authentication infoimation secured by the second device to 
authenticate the communication from the first device. 

2. The method of claim 1 , wherein transmitting pre-authentication information 
includes sending a digest of an authenticator from the first device to the second device. 

3 . The method of claim 2, wherein sending the digest of the authenticator 
includes sending a public key, or a digest of the public key. 

4. The method of claim 2, wherein sending the digest of the authenticator 
includes sending a digest of a secret. 

5. The method of claim 3, wherein using the pre-authentication information by 
the second device to authenticate the communication over the network medium includes 
using a key exchange protocol in the network medium. 

6. The method of claim 1 , wherein transmitting the pre-authentication 
information over a location-limited channel includes: 

sending a commitment including at least a commitment to a first secret and a 
commitment to a meaningful message from the first device to the second device; 

responding to the commitment from the first device by sending a commitment 
including at least a commitment to a second secret and a commitment to a meaningless 
message from the second device to the first device; 

acknowledging receipt of the commitment of the second device by the first 

device; and 

acknowledging receipt of the commitment of the first device by the second 

device. 

7. The method of claim 1 , wherein transmitting pre-authentication information 
includes exchanging at least one public key between the first device and the second device. 

8. The method of claim 1, further comprising using an infra-red channel as the 
location-limited channel. 

9. The method of claim 1, further comprising using an audio channel as the 
location-limited channel. 
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10. A method of securing a communication over a network medium among a 
group of devices, comprising: 

designating at least one device of the group as a group manager; 

exchanging pre-authentication information between the group manager and 
other devices of the group using a broadcast location-limited channel; and 

using the exchanged pre-authentication information secured by the group 
manager and the other devices to authenticate the communication over the network medium. 

1 1 . The method of claim 1 0, further comprises using the network medium to 
distribute a group key information from the group manager to the other devices in the group. 

12. The method of claim 1 0, further comprising: 
receiving a new device into the group of devices; 

exchanging pre-authentication information between the group manager and the 
new device using the broadcast location-limited channel; and 

using the exchanged pre-authentication information secured by the group 
manager and the new device to authenticate the communication over the network medium 
between the group manager, the group of devices and the new device. 

13. The method of claim 10, wherein, when a device leaves the group of devices, 
the method further comprises: 

nullifying pre-authentication information of the group manager with respect to 
remaining ones of the other devices of the group; 

distributing new pre-authentication information by the group manager to the 
remaining devices in the group; 

using the distributed pre-authentication information by the group manager and 
the remaining ones of the devices of the group to authenticate the communication between 
the group manager and the remaining ones of the devices of the group. 

14. The method of claim 1 3 , further comprises using the network medium to 
distribute a new group key information from the group manager to the remaining ones of the 
devices of the group. 

15. A method of authenticating a communication over a network medium among a 
group of devices, comprising: 

exchanging pre-authentication information between each device and other 
devices in the group over a broadcast location-limited channel; 
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using the pre-authentication information of a selected device for 
communication that is secured by a communicating device to authenticate the communication 
over the network medium with the selected device. 

16. The method of claim 15, wherein exchanging preauthorization information 
comprises using a group key exchange protocol to exchange keys among the devices of the 
group, wherein the pre-authentication information received fiom a given device of the group 
a device is used to authenticate a key received from that device. 

1 7. The method of claim 1 6, wherein exchanging preauthorization information 
comprises using a Diffie-Hellman key exchange protocol as the group key exchange protocol. 



